Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File: wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier: TkDW7FTDwO7AKyLjfrDfF60IcaE3dlnlGE/lSV6ckNo=
Subject key identifier: 65:C3:8D:AB:D0:FD:BA:6C:CF:E8:E0:E3:04:49:FC:79:EB:29:2A:73
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial: 01968134C5E25CBB49FC5E93BDA5A28431EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number: 0226
Signing time: Tue 29 Apr 2025 11:00:41 +0000
Manifest this update: Tue 29 Apr 2025 11:00:41 +0000
Manifest next update: Wed 30 Apr 2025 11:00:41 +0000
Files and hashes: 1: XmdSMCmint9DPZ--cCLmS94eFwY.roa (hash: Ecj0xnHDR2ooGxeY4fWUT554GHurKxl+Q6h8BrSfnec=)
2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: vBRcod0GA1+Md5ohNSQgXhSPwVhx7czeB5GaJ9BaaLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:c5:e2:5c:bb:49:fc:5e:93:bd:a5:a2:84:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Validity
Not Before: Apr 29 11:00:41 2025 GMT
Not After : Apr 30 11:00:41 2025 GMT
Subject: CN=65c38dabd0fdba6ccfe8e0e30449fc79eb292a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:c5:25:af:ab:6a:c7:f1:41:f6:07:40:8e:
1d:ac:18:cc:5a:28:32:63:64:ce:4e:ad:17:0d:a4:
b6:97:3f:a0:af:a5:05:20:cd:86:b8:d8:d9:d2:49:
fd:93:5f:ac:27:33:9a:50:77:60:0f:ff:28:c5:0a:
01:52:bf:87:72:e4:a7:7d:c4:20:95:3c:de:40:9e:
47:47:8f:bc:6f:c1:b0:79:90:fa:54:5b:d6:9c:1c:
af:b8:a0:bd:60:2e:fb:67:bf:ad:b7:b1:12:70:91:
b3:ec:8b:d3:00:9b:ea:50:22:05:07:25:64:29:f1:
ec:24:72:36:80:e5:cc:7d:8e:96:99:9f:eb:d7:08:
66:00:0a:5f:97:d4:a5:99:1f:39:3c:4d:7a:4f:6c:
ef:88:bf:af:46:3d:08:1e:63:f3:e0:3f:78:a6:b5:
c4:90:f7:9b:2a:22:a7:e2:d3:e8:01:7f:ff:f1:c6:
46:68:c5:1a:c9:ce:cf:fb:93:cb:4f:db:30:53:27:
76:df:1b:27:a7:2e:15:f6:b3:c7:10:cb:42:6a:28:
a7:c3:40:b2:31:98:33:5d:e5:60:72:a1:79:8d:90:
41:23:a4:d7:d0:99:0a:b8:46:e2:1b:79:c3:53:60:
87:4c:b5:53:2b:e0:27:23:3b:76:8b:62:d1:24:8e:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:8D:AB:D0:FD:BA:6C:CF:E8:E0:E3:04:49:FC:79:EB:29:2A:73
X509v3 Authority Key Identifier:
keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7b:ab:85:4e:f9:05:a9:f1:df:00:1f:be:bc:1a:cc:18:0e:
b4:78:95:e2:23:84:60:82:44:8d:f7:0f:60:68:24:7a:f9:50:
90:3d:d9:8b:5e:f3:dc:0d:1b:79:d6:af:c0:be:54:c1:23:da:
8c:9c:ee:6f:70:4b:63:42:22:00:dc:f0:50:d1:ae:90:f8:94:
ea:28:e3:60:4c:b6:ba:d8:6b:d9:ac:6a:ef:ee:be:26:65:b4:
0b:9d:70:b5:1a:64:0c:6f:59:16:4d:99:bb:e8:f2:f4:f3:a8:
f0:46:e4:34:9f:24:e1:be:f8:33:72:44:38:97:04:06:64:ae:
30:a0:df:5c:a2:27:c9:ad:bc:61:a1:17:a8:75:74:04:c7:25:
0b:99:f5:14:db:31:91:b8:5c:f0:fd:08:41:7d:54:7b:2f:46:
f9:da:a9:b1:16:40:f2:05:0b:f0:92:61:c5:32:a9:ca:bb:ae:
8e:9c:97:ab:ec:20:0a:f7:c9:6f:30:c6:eb:ce:2f:8b:ae:82:
31:b1:69:8b:b8:d3:bd:78:d7:01:37:74:ac:bb:a2:20:46:38:
ff:d8:0f:22:70:71:11:47:7f:46:08:bb:2d:fd:a8:9a:62:19:
e1:ae:4d:e1:be:33:97:7d:37:62:f1:8e:7c:9d:8f:9e:65:b5:
6d:58:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:33:25 2025 by rpki-client